x/vulndb: potential Go vuln in codeberg.org/forgejo/forgejo: CVE-2023-49947

[GoVulnBot]

CVE-2023-49947 references codeberg.org/forgejo/forgejo, which may be a Go module.

Description:
Forgejo before 1.20.5-1 allows 2FA bypass when docker login uses Basic Authentication.

References:

• NIST: https://nvd.nist.gov/vuln/detail/CVE-2023-49947
• JSON: https://github.com/CVEProject/cvelist/tree/b6546379f05541304de0c124140ceb54bb4f7832/2023/49xxx/CVE-2023-49947.json
• web: https://forgejo.org/2023-11-release-v1-20-5-1/
• fix: https://codeberg.org/forgejo/forgejo/commit/44df78edd40076b349d50dc5fb02af417a44cfab
• Imported by: https://pkg.go.dev/codeberg.org/forgejo/forgejo?tab=importedby

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: codeberg.org/forgejo/forgejo
      vulnerable_at: 1.17.3
      packages:
        - package: n/a
cves:
    - CVE-2023-49947
references:
    - web: https://forgejo.org/2023-11-release-v1-20-5-1/
    - fix: https://codeberg.org/forgejo/forgejo/commit/44df78edd40076b349d50dc5fb02af417a44cfab

[gopherbot]

Change https://go.dev/cl/547979 mentions this issue: data/excluded: batch add 11 excluded reports

[gopherbot]

Change https://go.dev/cl/592764 mentions this issue: data/reports: unexclude 31 reports